Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3438203d3e20323633333734.roa
File:                     323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (raw, json)
Hash identifier:          9Lp4RA+fIy0+Iq3rhOLoVrqKOsg10QMnv/32F74ftjQ=
Subject key identifier:   36:91:75:E8:69:62:06:90:CF:80:F4:73:8B:A3:A1:DC:88:21:F6:FF
Certificate issuer:       /CN=64A4C055937725EED2339AE55AEE2D3F4FDACAE3
Certificate serial:       4FFC83285760B13EF87516AF47F021BDDB47CED1
Authority key identifier: 64:A4:C0:55:93:77:25:EE:D2:33:9A:E5:5A:EE:2D:3F:4F:DA:CA:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64A4C055937725EED2339AE55AEE2D3F4FDACAE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3438203d3e20323633333734.roa
Signing time:             Thu 04 Jan 2024 15:00:01 +0000
ROA not before:           Thu 04 Jan 2024 14:55:01 +0000
ROA not after:            Thu 02 Jan 2025 15:00:01 +0000
asID:                     263374
IP address blocks:        2804:1528::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fc:83:28:57:60:b1:3e:f8:75:16:af:47:f0:21:bd:db:47:ce:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64A4C055937725EED2339AE55AEE2D3F4FDACAE3
        Validity
            Not Before: Jan  4 14:55:01 2024 GMT
            Not After : Jan  2 15:00:01 2025 GMT
        Subject: CN=369175E869620690CF80F4738BA3A1DC8821F6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:31:3d:f7:80:03:d4:48:9c:02:61:f9:27:
                    24:1f:49:b7:08:57:9d:d6:e7:28:83:50:d3:75:af:
                    58:d2:55:10:c5:6a:de:c5:97:24:9e:6d:29:5e:6e:
                    11:ee:b0:41:78:12:18:16:18:20:b4:f6:8b:8f:b8:
                    81:c3:0e:51:8d:4a:d6:75:dd:2f:fe:e0:e6:5e:5b:
                    29:db:3f:ae:86:a0:b4:a3:8a:80:50:12:dd:17:4c:
                    a9:96:ac:0c:5d:1b:9d:b8:15:b2:d8:d1:68:03:4f:
                    4a:63:5a:1a:8e:df:a7:ca:e9:1b:0f:fc:f7:74:4c:
                    6a:ac:75:b0:29:19:cd:e3:cf:a6:b8:5d:6a:4a:18:
                    a3:80:5e:2c:7e:77:0e:05:ec:6d:d9:bd:67:db:3c:
                    f0:66:0e:25:9e:b5:02:5d:3f:a6:dd:ac:7f:a7:21:
                    b6:b6:a1:b5:a2:45:67:d7:4a:43:88:2a:b3:3f:46:
                    5d:5b:60:ad:f2:ef:78:73:ad:38:78:26:e9:be:a0:
                    eb:c1:7e:a8:6b:0b:e8:81:ca:de:b4:88:b1:4a:d1:
                    09:36:e1:bb:5d:2f:19:31:e1:46:fa:15:0f:42:e1:
                    aa:e9:ef:55:4b:00:8f:11:09:02:43:ca:78:42:c4:
                    0e:f0:ab:08:18:12:58:97:cb:88:d4:27:64:c7:54:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:91:75:E8:69:62:06:90:CF:80:F4:73:8B:A3:A1:DC:88:21:F6:FF
            X509v3 Authority Key Identifier:
                keyid:64:A4:C0:55:93:77:25:EE:D2:33:9A:E5:5A:EE:2D:3F:4F:DA:CA:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/64A4C055937725EED2339AE55AEE2D3F4FDACAE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64A4C055937725EED2339AE55AEE2D3F4FDACAE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3438203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1528::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:95:e7:da:34:bc:c8:79:d4:f6:17:81:c0:d4:05:d2:fa:f0:
         b2:0a:17:73:85:17:60:21:61:11:91:aa:97:94:b7:7a:77:37:
         a9:29:27:b2:ce:ab:48:e6:80:aa:14:12:e3:1c:76:f4:ed:9d:
         f2:ec:ea:71:eb:49:32:91:ef:f6:86:75:76:f9:fa:f4:91:38:
         67:43:fa:c7:ae:c1:71:b9:d1:eb:fb:db:fe:75:43:6f:41:c2:
         ea:94:41:b2:b5:fb:75:db:07:ed:a2:f5:3f:63:29:ae:dc:31:
         0a:4c:70:eb:e4:17:b5:bd:fe:1e:b5:28:9c:89:a5:f1:2b:89:
         0f:22:aa:32:0b:36:3a:54:ce:a4:2a:b0:0d:59:63:65:03:98:
         4a:89:47:fe:f3:bf:1c:18:19:ba:44:7f:06:e6:97:d1:84:fb:
         b6:e6:33:e0:2e:a1:56:a9:af:43:9f:3e:e0:79:3a:19:67:5c:
         24:65:2a:ae:40:39:f1:80:62:67:44:8a:3a:72:52:ab:3e:c3:
         a0:40:9f:46:98:31:57:65:36:fc:2c:76:9f:5f:4a:37:89:c4:
         75:b9:83:d0:ff:e9:fd:bb:26:d5:ab:08:f2:bc:8c:0a:45:0d:
         85:2a:8d:7a:56:4c:11:09:b0:6f:bc:4a:4e:29:dd:9f:e6:76:
         de:c2:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:09 2025 by rpki-client